Exam AZ-400 topic 4 question 72 discussion

Actual exam question from Microsoft's AZ-400

Question #: 72
Topic #: 4

You manage code by using GitHub.

You plan to use Dependabot to scan for code dependencies.

You need to identify when scanning will be triggered automatically.

Which two actions will trigger a scan? Each correct answer presents a complete solution.

NOTE: Each correct solution is worth one point.

A. The dependency graph of a repository changes.
B. A pull request is created.
C. A branch is forked.
D. Any commit is pushed.
E. A new advisory is added.

Show Suggested Answer

Suggested Answer: AE 🗳️

by Alandt at Jan. 15, 2024, 2:16 p.m.

Comments

Submit Cancel

freddyneen

Highly Voted 10 months, 4 weeks ago

Answer is correct: https://docs.github.com/en/code-security/dependabot/dependabot-alerts/about-dependabot-alerts#detection-of-insecure-dependencies

upvoted 6 times

...

4c78df0

Most Recent 6 months, 3 weeks ago

Selected Answer: AE

correct

upvoted 2 times

...

Alandt

11 months ago

The two actions that will trigger a Dependabot scan automatically are: A. The dependency graph of a repository changes. E. A new advisory is added. Dependabot scans are triggered when the dependency graph changes, such as when dependencies are added or updated. Additionally, when a new advisory is added to the GitHub Advisory Database, Dependabot will check for dependencies affected by the advisory.

upvoted 4 times

...